Skip to content

Allow the Oauth2 password authorisation grant without username/password for x509 client certificate authentication #11759

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
joshiste opened this issue Aug 27, 2022 · 1 comment
Closed

Allow the Oauth2 password authorisation grant without username/password for x509 client certificate authentication #11759

joshiste opened this issue Aug 27, 2022 · 1 comment
Assignees
@jgrandja
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) status: duplicate A duplicate of another issue

Comments

@joshiste
Copy link
Contributor

Expected Behavior

Allow the PasswordReactiveOAuth2AuthorizedClientProvider to be used without password nor username.

Current Behavior

PasswordReactiveOAuth2AuthorizedClientProvider will not attempt authentication when password/username not set

Context

Keycloak has the option to authenticate clients using x509 certificates instead of username and password when using the password autoriztion grant type (See https://www.keycloak.org/docs/19.0.0/server_admin/index.html#_x509 - the direct grant flow case)
As a workaround we set a bogus username and password.
@joshiste joshiste added status: waiting-for-triage An issue we've not yet triaged type: enhancement A general enhancement labels Aug 27, 2022
@jgrandja
Copy link
Contributor

Closing this as duplicate of gh-4498

@jgrandja jgrandja self-assigned this Aug 29, 2022
@jgrandja jgrandja added status: duplicate A duplicate of another issue in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) and removed status: waiting-for-triage An issue we've not yet triaged type: enhancement A general enhancement labels Aug 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jgrandja jgrandja

Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) status: duplicate A duplicate of another issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@joshiste @jgrandja